Scrambled Keypad Image for Secure PIN Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
PIN-based authentication systems face security challenges in card-not-present transactions, as data transmission over mobile devices can be intercepted, and existing solutions either require dedicated card readers or compromise security by using unsecure devices for PIN entry.
Innovation Solution
A method and system that uses a scrambled keypad image displayed on a mobile device or similar electronic device, where the user inputs their PIN by interacting with a graphical representation of a keypad, which is mapped to an underlying functional keypad without storing or transmitting the actual PIN, ensuring security through encoding and remote decoding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PIN entry is performed on mobile devices for card-not-present transactions, then convenience and accessibility are improved, but security is worsened due to potential data interception
Solution Approach 1:
The patent introduces a scrambled keypad image as an intermediary between the user and the actual PIN entry interface. The scrambled keypad acts as a mediator that obscures the direct mapping between user input and transmitted PIN data, thereby maintaining convenience while enhancing security through encoding
Solution Approach 2:
The patent creates a visual copy (scrambled keypad image) that resembles a functional keypad but does not directly reveal the actual key mappings. This copy allows users to interact familiarly while the underlying encoding mechanism protects the real PIN data from interception
2Reliability
If dedicated card readers are used for secure PIN entry, then security is improved, but device complexity and cost are worsened
Solution Approach 1:
The patent enables standard mobile devices to perform secure PIN authentication by implementing the scrambled keypad encoding method in software. This eliminates the need for dedicated card readers, allowing universal use of common mobile devices while maintaining security through the encoding mechanism
Solution Approach 2:
The patent replaces the mechanical/dedicated hardware card reader system with a software-based scrambled keypad implementation on general-purpose mobile devices. This substitution maintains security functionality while eliminating the need for specialized hardware
3Measurement precision
If actual PIN is stored or transmitted during authentication, then authentication accuracy is improved, but security is worsened due to interception risks
Solution Approach 1:
The patent transforms the PIN data from its original readable form into an encoded representation through the scrambled keypad mapping. This parameter change in data representation maintains the ability to verify authentication accuracy while protecting the actual PIN from interception during transmission
Data Source
AI summary
The invention provides a computer-implemented authentication method comprising the step of enabling a user to input an identifier (e.g. a PIN) into an electronic device having a screen and a keypad operable within a keypad zone of the screen; by operating at least one key of the keypad via an image of at least part of a scrambled keypad which is displayed at least partially within the keypad zone. The user's operation of the keypad key via the image generates an encoded version of the user's intended input. In one sense the invention can be perceived as superimposing a non-functional image of a scrambled keyboard over an underlying, functional keypad. The image may be any type of electronic image, and may include a video image. The invention is particularly suited for use with, but not limited to, mobile phones, tablet computer, PCs etc. It can be implemented in any system wherein a user's identity must be verified before access is granted to a controlled resource.